# Changelog

## Score

- CAI 54 → 54 (+0.3)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.19) — scores are not directly comparable.

## Lenses

- Code Health 87 → 87 (+0.0)
- Architecture 92 → 100 (+8.2)
- Maturity 48 → 48 (+0.0)
- Readiness 50 → 50 (+0.0)
- Security 65 → 65 (+0.0)
- Domain Modelling 100 → 100 (+0.0)
- Accessibility 52 → 53 (+0.8)

## Resolved (10)

- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High vulnerability: [GHSA redacted] (package-lock.json)
- High vulnerability: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- The README features a clipped Folder Structure section that ends mid-sentence ('Infrast'), so the Infrastructure Layer and Adapters Layer sections are not visible. (README.md)
- The domain README is excellent but does not cover the presentation layer or how it interacts with the domain layer, which is critical for a clean-architecture reader. (domain/README.md)

## New (17)

- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High CVE: [GHSA redacted] (package-lock.json)
- High vulnerability: [GHSA redacted] (package-lock.json)
- High vulnerability: [GHSA redacted] (package-lock.json)
- High vulnerability: [GHSA redacted] (package-lock.json)
- High vulnerability: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- Medium CVE: [GHSA redacted] (package-lock.json)
- The domain README covers entities, value objects, aggregates, repository interfaces, but it does not explain what the Infrastructure Layer provides (e.g. file system access) or how adapters connect the Domain Layer to external resources. (domain/README.md)